Https- Graph.microsoft.com: V1.0 Applications

POST /servicePrincipals

Query for apps with unused delegated permissions: https- graph.microsoft.com v1.0 applications

) | ConvertTo-Json -Depth 10

"appId": "<the appId from above>"

In Microsoft Graph, an ( /applications ) is the global, multi-tenant definition of an app—its logo, requested permissions, redirect URIs, and certs/secrets. POST /servicePrincipals Query for apps with unused delegated

Whether you're automating app lifecycle, building an internal governance tool, or hunting for security misconfigurations, this endpoint is your scalpel. Use it with precision, respect its throttling limits, and always—always—validate the signInAudience before you deploy. | Feature | /v1

| Feature | /v1.0 | /beta | |---------|---------|---------| | Federated identity credentials (workload identity federation) | ❌ | ✅ | | App role assignment conditions | ❌ | ✅ | | serviceManagementReference | ❌ | ✅ | | uniqueName (human-readable app identifier) | ❌ | ✅ |